high8.0Public exploit code
CVE-2018-8718
Cross-site request forgery (CSRF) vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated users to send unauthorized mail as an a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Jenkins Mailer Plugin < 1.20 - Cross-Site Request Forgery (Send Email)2018-06-05 · webapps · linux
Impact
Cross-site request forgery (CSRF) vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated users to send unauthorized mail as an arbitrary user via a /descriptorByName/hudson.tasks.Mailer/sendTestMail request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jenkins | Mailer | through 1.20 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2018/03/26/3
- http://www.securityfocus.com/bid/103691
- https://jenkins.io/security/advisory/2018-03-26/
- https://www.exploit-db.com/exploits/44843/
- http://www.openwall.com/lists/oss-security/2018/03/26/3
- http://www.securityfocus.com/bid/103691
- https://jenkins.io/security/advisory/2018-03-26/
- https://www.exploit-db.com/exploits/44843/